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(57) Abstract 

A money transfer system comprises remote terminals (10) for receiving transfer request information from a transferor (I4X If the 
transferor is a new customer, a central server (12) generates a new party identifier code (PIC) using a secure postal printer (16), to send 
die PIC to the transferor nidependently of the communication widi the teiminal (10). The PIC will be rD-used for subsequem tsztisSm 
from the transferor. Vat each transaction, the server (12) allocates a unique transaction code (UTC) which is outputted to the transferee at 
the terminal (10). The server also generates money transfer instructions (22) comnnmicated to the remote money handling authorities (28). 
The instructions include the existing or newly allocated PIC. verification code (TVC) related to the UTC, but insufficient to enable the 
UTC to be deduced therefrom. It is the transferor's responsibility to ccmummicate the UTC and the PIC to the transferee (18). preferably 
by separate routes for security. If the parties have taken place in a previous transfer, then the transferee will already know the PIC from 
the previous transfer. The transferee can pick up the money from the bank upon presentation of the correct PIC and PIN matching the 
information in the money transfer mstructions. 
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METHOD AND APPARATUS FOR MONEY TRANSFERS 

This invention relates to method and apparatus for facilitating money tiansfen 
The invention is pardculariy suitable for inter-country money transfers, but it is not 
5 limited exchisively to this. 

Money transfer services are offered by a number of organisations, for example 
banks, tlie Moneygram organisation, and the Western Union organisation. A tnmsferee 
wishing to transfer money is able to visit a local authorised agent and arrange for 
money to be made available for collection by a transferee at another authorised agent or 
10 bank, for example, in a different country. 

In developing the present invention, it has been appreciated that conventional 
techniques suffer from certain problems: 

(i) Identification of the transferee. Normally, a transferee wiU be required to 
present proof of identification, for example, a pas^rt or driving licence, before being 

15 permitted to collect the innds. However, there are a large number of countries in 
which many people do not holds pasqM>rts or other officially recognisable proof of 
identification. In such cases, money transfer may be limited to postal transfers. 
Western Union offers a code-word facility by which a transferor can praivicfe a code 
word with the initial transfer mstructions. Hie transferee is required to present a 

20 matching code word instead of presenting proof of identification. 

(ii) Security. Particularly when a code word is used, there is a risk of the 
transferee, or other parties involved in the money transfer process, committing fraud. 
It will be appreciated tiliat, especially in certain countries, fiand and corruption may be 
commonplace, and difficult to control from outside the countiy. In general, the 

25 transferee, and the bank staff in the country of the transferor and die transferee, all 
have access to the code word and sufficient other information to collect the funds and 
to complete the transaction (since no proof of identity is required). Sudi fraud is very 
difficult to detect and to prevent. 

(ill) Accuracy of information. Ofteiu information is passed orally within a transfer 
30 organisation by telephone. This can 1^ to inaccuracies in the informaticm. 
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paiticulariy when unfamiliar prontmciation is involved, or if two people are not fiiUy 
conversant in the same language. For example, if a the name of the transferee is 
misfit, then it may be impossible for the correct transferee to coUect the funds evoi 
on presentation of proper identiiication. Such a common enor can only be corrected 

5 by the transferor complaining to the transfer organisation, when he is notified of the 
non-delivery by the transferee; the full transfer details have to be taken again from the 
transferor to attempt a further transfer 

The present invention has been devised bearing the above problems in mind. 
Broadly speaking, a first dtspect of the invention is to provide the transferor widi 

10 a secret identifier code (referred to in preferred embodiments as a party identification 
code or PIQ which is supplied to the transferor independently of the information 
exchange with the transferor when the transferor is making a transfer request (for 
example, m the preferred embodiment, the PIC is sent to the transferor by post). The 
i(tentifier code (or at least information related thereto) can be tiansmitt^ as part of the 

15 money transfer instructions through the money handling authorities. The transferor is 
required to transmit the secret identifier code to the transferee, and the transferee is, in 
turn, required to present the identifier code as one of die conditions to be met before 
the money can be collected by the transferee. Possession of the correct identifier by 
the transferee represents proof that the transferee has been authorised to receive funds 

20 by the transferor. 

As used herein the term "money handling authority" refers to any authority 
empowered to handle money and» where appnq>riate, refers to any authority 
empowered to provide funds to a transferee. The term may inchide, but is not limited 
to, banks, internet banks, po^ offices, etc. 

25 Such a tedmique can avoid tfie need for the transferee to possess official proof 

of identification, and can also improye security. In particular, the local handling agents 
at the point of sale to the transferor will not have access to sufficient information to 
receive tiie funds fraudulentiy. 
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Preferably^ the identifier code (PIQ is allocated for at least one of the parties to 
the transfer (i»e. the transferor and/or the transferee). In the preferred embodiment, 
the identifier code (PIC) for the transferor, and the same code is re-used for subsequent 
transfers irom the transferor to any transferee. This avoids the need for new identifier 

5 codes to be issued to the transferor for each transaction. 

Broadly ^)eaking, a second closely related Bsptci of the invention is to generate 
an identifier code (referred in preferred embodiments as a unique transaction code or 
UTQ, and to provide tte transferor with the code (to be forwarded by the transferor to 
the transferee), but provide the money handling authority instructed to handle the 

10 transfer with second code (referred in the preferred embodiments as a transaction 
verificadon code or TVC) related verifiably to the identifier code. TTie second code is 
sufficient to enable the money handling authority to verify that the transferee is 
authorised to receive the funds upon presentation of the complete code by the 
transferee. Upon coUecdon of the funds, the money handling authority can return die 

15 ccmiplete identifier code through the banking system, as evidence that the funds have 
been collected by the authorised transferee. 

Such a technique can provide security against a fiaudulent "collection" of the 
transfer by the money handling authorities instructed to handle the transfer, ^nce the 
money handling staff will not have access to the complete identifier code to complete 

20 validly the transaction by returning the full code as evidence of completion. If the 
Amds are collected fraudulently by a person who has knowledge only of the second 
axle (i.e. the TVQ, and has therefore had to add a guessed code to die known cocte, 
diis will be readily noticeable when the incorrect code is received back from the money 
handling authority. 

25 Preferably, this aspect of the invention further comprises testing, at least 

selectively or on demand, the fiiU identifier code mformation returned for eadi 
ompletBd transfer against the originally allocated icfentifier code to verify that Ae 
correct transferee has collected the funds. 
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Although the above aspects can be used mdependently» particular advantages 
can be achieved by using the two a^)ects in combination. In particular, the technique 
can then ensure that neither the handling agents at the point of sale, nor the handling 
agents at the point of collection, possess all of the necessary information properly to 
5 complete a transfer. Only the transferor and the transferee possess the necessary codes 
(i.e. the PIC identifier code of the first aspect, and the UTC identifier code of the 
second aspect) needed to complete the transfer. 

In a closely related aspect, the invention provides a method of generating a first 
identifier code (UTC in the preferred embodiments) and a second code (TVC in the 
10 preferred embodiments) related thereto, the method comprising: 

generating the first code such that at least one character thereof represents a 
function of one or more other characters of the first code; 

generating a second code comprising at least one, but not all, of the characters 
of the first code, and conq>riang information indicative of the position in said first code 
15 of said at least one character and/or of said cHie or more other characters. 
Preferably, the characters of the first code are numeric. 
Preferably, the iiincdon is a checksum (or sum) function. 
Preferably, the second code comprises one or more ''blank'" characters 
representing missing character or digit portions of the first code. 
20 Preferably, the fiinction is based on characters in one or more predetermined 

positions in the first code, and said information represents the position in said first code 
of the result of the function. 

In the preferred embodiment, the function is numeric sum function of the first 
four digits in the first code, and the information identifies where the result is to be 
25 found in die last four digits of the first code; a first character CW) denotes that the 
result is in the first one or two digits of die last four; a second character ("M**) denotes 
that the result is in the middle one or two digits of the last four; and a third character 
CV) denotes that the result is in the last one or two digits of the last four. It will be 
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appreciated that other mdexing systems could be used, for example, depending on the 
mmiber of character positions available for the result 

In a closely related aspect, the invention provides a method of testing 
uaformation provicted by a transferee for collection of funds, die method compridng: 

receiving transfer instructions mchidmg a first party identifier code allocated to 
at least one of the parties to flie transfer, and a second transaction verification code 
related to a transaction identifier code allocated to the transaction; 

(a) comparing the first party identifier code fiom the transfer instructions with a 
party identifier code provide by the transferee; and 

(b) comparing the second transaction verification code widi a transaction 
identification code provided by the transferee. 

Preferably, the method fiirther comprises returning the transaction identification 
code to the issuing authori^ as evidence tiiat die transferee is autiiorised to receive the 
fimds. 

Prefer^ly, the transacticHi verification code contains some, but not all of the 
diaracters of the transaction identification code, and the method comprises comparing 
each known character m the transaction verification code for equivalency with a 
corresponding character of the transaction identifier code. 

Preferably, the transaction verification code includes information associated 
with the result of a fonction based on one or more characters of the transaction 
identification code, and the method comprises testing whether the transaction 
identification code presented by the transferee matches the function. 

In a closely related aq>ect, the invention provides a money transfer systrai 
comprising: 

at least one remote input unit operable to generate a money transfer request in 
accordance with mformation fnmi a transferor; and 

processing means for Gommunicating witii each remote unit for receiving and 
processing money transfer requests received therefrom, die processing means 
comprising: 
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means for providing a first identifier code associated with the transaction and/or 
with the identity of one or more parties to the tiansfer» 

means for ou^tting first information inchiding the first identifier code, to be 
communicated direcdy or mdirecdy to tte transferor uidependently of die 
5 communication with the terminal; and 

means for oulputting second information to be supplied direcdy or indirectiy to 
a money handlmg audiority as instructions to effect the transfer for collecticm, die 
second information including at least a portion of the first identifier code or information 
related thereto to enable die authority of the transferee to be verified. 
10 Preferably, the system inchides a phnality of terminals. Preferably, die 

processmg means (also referred to herein as the server), is able to communicate with 
each terminal at various times during a woridng day, to control the terminals direcdy, 
or to upload transfer requests (and any other information) logged by the terminals while 
off-line (if off-line operation is supported). 
15 In a fiuiher closely related aspect, the invention provides a money transfer 

system conq)rismg: 

at least one remote iapui unit operable to generate a money transfer request in 
accordance with information fit>m a transferor; and 

procesiang means for communicating with each remote unit for receiving and 
20 processmg money transfer requests received tfaerefiom, wherein: 

the terminal and/or the processing means is (^rable to output for 
communication direcdy or indirectiy to die transferor, an identifier code allocated to 
the money transfer; and 

the processing means is operable to output money transfer instructions to be 
25 supplied direcdy or indirectiy to a money handUng authority as instractions to effect the 
transfer for collection, the instractions including only a first portion of the identifier 
code, whereby the money handling authority can verify a portion of the identifier code 
presented by the transferee. 
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Preferably, the tenninal is curable to ou^t the code to the transferor directly. 
Preferably, the terminai is operable to communicate the identifier code to or from the 
processing means. 

Preferably, the system comprises means for receiving a lull identifier code 
5 returned by the money handUng authority as evidence of completion of die transfer, and 
means for comparing tfie returned identifier code witii die originally allocated code for 
the transaction. 

Preferably, die system comprises database means for storing die identifier code 
allocated to each transaction. 
10 An embodiment of the invention is now described, by way of example only, 

with reference to the accompanying drawings, in which: 

Fig. 1 is a schematic block diagram illustrating die principles used m the 
embodiment; 

Rg. 2 is a schematic diagram illustrating the information used m Fig. 1; 
15 Rg. 3 is a schematic diagram iUustrating ^neration of a UTC and a TVC; 

Fig. 4 is a schematic block diagram of a remote input unit; 

Hg. 5 is a schematic block diagram of the central server; 

Fig. 6 is a flow diagram illustrating q)eration of the central server; 

Rg. 7 is a flow diagram illustratijag operation of die second embodunent of 
20 terminal; 

Rg. 8 is a flow diagram iUustrating information exchange between the terminal 
and the central server during a polling operation; and 

Fig. 9 is a flow diagram iUustrating operation of die server for handUng 
information from the second embodiment of tenninal. 

25 

The principles used in this embodiment are first described briefly with reference 
to Rgs. 1 and 2. The sysiem consists of a phiraUty of remote terminals 10 located^ for 
example, in diops and/or banks witltin a local ccmunonity. Tte teimmals 10 
communicate widi a central processor, also referred to hereinafter as the server 12. 
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The tenninals 10 inay» for example, be coupled to the server 12 by conventional 
telephone modems which call up the server 12 to be controlled by the server 12. In 
this embodiment^ all q)erations and calculations are perfonned by the server 12, and 
the tennmal 10 acts as a dumb slave unit, i.e. as a remote input and di^lay device. To 

5 improve security, the server 12 may cail-back the terminal 10 at a pre-designated 
telephone number to ensure that third parties cannot break into the server operation. 

When a new customer desires to perfonn a transfer, or desires to be "logged" 
as a customer for future transfers, this can be done at any terminal 10, which calls the 
server 12 to perform the process under to server's control. The customer's details 

10 including his name and address are inputted through the terminal 10 and recorded by 
the server 12 in a customer database 12. The local agent gives the customer a swipe 
card (not shown) which may be coded in any suitable manner, for example, optically, 
magnetically, or carry an electronic circuit. In this embodiment, the swipe card has a 
conventional magnetic strip on which is a pre-recorded code uniquely identifying the 

15 card. The code also doubles as a unique identification code for the customer (and is 
referred to later as the CHC, for customer- or card- identification code). To validate the 
card, the customer or the local agent is required to insert the card into the terminal so 
that the pre-recorded code can be read by the terminal's card reader (not shown) and 
communicated to the server 12 to be recorded m the customer database. 

20 Either immediately, or at some tune later, the server 12 allocates a party 

identification code (PIC) for the new customer. The PIC is needed later by a transferee 
to verify that he has been authorised by the transferor to receive the funds. In this 
embodiment, the PIC is generated using a random or pseudo random generator, and 
consists of a numeric code, for example, a four digit code, but an alphanumeric or 

25 purely alphabetic code could be used mstead. The PIC is printed using a secure postal 
printer 16, and is posted directiy to the customer 14. A significant feature is that the 
PIC is not communicated through the termmal 10, and so the local a^nt has no means 
of accessing a person's PIC to fraudulently mtercept transfers. 
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To peifonn a transfer/ the customer (transferor) 14 presents his swipe card to be 
inserted into the terminal's card reader. This initiates commmiication betwera the 
terminal 10 and the server 12 so that the transfer details can be iiq>utted to the server 
12. The transfer details inchide the name and address of the transfeiee^ the amount to 
5 be transferred, and the name and address of the bank or other money handlmg authority 
at which the transferee will collect the transferred funds. The latter information can be 
selected firom a list or menu of allowable collection authorities for any particuhr 
country or town. 

The server 12 calculates the amount required to be paid by the transferor, which 
10 the transferor pays to the local agent. The server 12 then allocates a transaction 
identification code for die transfer, in the form of a unique transaction code (UTC). In 
this embodiment, the UTC is based on a pseudo-random code, which is tested to ensure 
diat it uniquely identifies the transfer (at least for the period m which die transfer is 
valid; the same code is available for re-use after that period). The code is numeric^ but 
' 15 m altematrve embodiments could be alphanumeric, or purely alphabetic. The server 12 
communicates the UTC to the terminal 10, and a hard copy of die transfer details, 
including the UTC, is printed out by the terminal 10 to be given to the transferor as a 
receq>t. 

It is the transferor's req)onsibility to send the PIC and the UTC to the transferee 
20 18 and to ensure that only the intended transferee receives this information. Normally 
dus would be done by sending the PIC and die UTC by separate routes (depicted as 20a 
and 20b in Fig. I), for example, by separate letters, or by communicating one by letter 
and the other by telephone or telex. The UTC and the PIC together provide the 
transferee with all of the information needed to validate the transacticm, and collect the 
25 transferred funds. 

To effect the transfer, the server 12 communicates a transfer request 22 directly 
or indirectly (for example through a remote terminal) to a onnpater 24 of a dcmiestic 
bank (assuming that the transfer system is being ran by an independent organisation 
using the hank as an intermediary). The transfer request 22 includes the transfer details 
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supplied by the transferor, and also includes the PIC and a transaction verification code 
(TVQ. The TVC is related to the UTC to enable verification of the correct UTC when 
presented by the transferee, but the TVC does not itself contain sufficient information 
to enable the original UTC to be deduced if it is not known. The bank computer 22 

5 processes the transfer recpiest and communicates the transfer information 26, by 
conventional bank transfer services, for example by telex, or by SWIFT, to die foreign 
bank 28 nominated by the original instructions from the transferor 14. The transfer 
information 26 siq>plied to the foreign bank inchi(fes the PIC and the truncated TVC. 

In order to collect the transferred funds, the transferee 18 visits die foreign bank 

10 28 and presents the PIC and full UTC. The PIC provides evidence tlat the person has 
been authorised by the transferor to receive funds, and the full UTC provides die 
necessary audiorisaition to complete the transaction. The staff at the foreign bank 7S 
are able to compare transferee's UTC with die TVC with which they have been 
-supplied to verify diat the full UTC matches the TVC. The foreign bank 28 dien 

15 returns the full UTC to the domestic home bank 24 as evidence that the transfer has 
been properiy completed, and that the correct recq)ient has been paid. 

Such a system offers important advantages over conventional techniques: 
(a) The transferee does not require any form of personal identification, such as a 
passport, or a driving licence. 

20 (b) The only parties in possession of all of the necessary information validly to 
complete a transactk>n are the transferor, and the transferee. The agents at die pomt of 
sale (10) (to not have access to the PIC, since this is aUocated direcdy by the server 12, 
and is communicated to the transferor by post. The staff at the domestic home bank 24 
and at the foreign bank 28 have access to the PIC, but do not have access to the full 

25 UTC. This will obstruct any fraudulent activity by the handling authorities or agents, 
(c) It is die re^nsibility of die transferor to transmit die PIC and the full UTC to 
the transferee in a secure manner. If this mformation is mtercepted and the funds are 
collected fraiidulendy by a third party, then neidier die money handling authorities, nor 
the money transfer organisation, has to accept liability. 



SUBSTTTUTE SHEET (RULE 26) 



wo 99/28872 



PCT/GB98m3537 



II 

For subsequent transfers from the same transferor 14, the original PIC is 
reused. The server 12 maintains a database of transferors and the PIC allocated to 
each. New PIC's are only allocated, printed and posted for new transferors, or if a 
transferor believes his PIC to have been compromised. 

In general, a transferor will only have to notify his PIC to a transferee once. 
Once the transferee knows the PIC, all he needs to receive funds is the new UTC 
associated with each individual transaction. This further reduces the chances of 
information bemg intercepted between the transferor 14 and the transferee 18. 

There arc numerous techniques for generating a TVC which relates verifiably to 
the UTC but does not prejudice the security of the UTC. For example, one technique 
is to truncate, or blank, one or more digits or characters from the UTC, leaving a code 
which partly matches the full UTC. The security can be improved by varying the 
number and/or the positions of the blanked characters, so that a person will not be able 
to predict which of the characters of the code are akeady known in the TVC. 

Another technique for generating a TVC is generate one or more checksum 
digits or characters. These can ehher be inchided m the UTC, or they can be inchided 
only m the TVC. The security can be improved by varying the number and/or the 
positions of the characters or digits on which the checksum is based, so that a person 
will not be able to predict which characters represent, or contribute to, the checksum. 

In a particulariy preferred embodiment, the TVC is generated by a combination 
of the above two techniques. Referring to Fig 3, the UTC can consist of a 7, 8, 9 or 
10 digit code, for example the code illustrated in Fig. 3a. This is based on a pseudo* 
random number, but tailored such that the sum of the first four digits A is represented 
somewhere in the last four dighs, namely in the first one or two digits B of the last 
four, or the middle one or two digits C of the last four, or die last digit or digits D. In 
the illustrated code, die sum (i.e. 8+4+5+9=26) is rq)resented in the middle two 
digits C of the last four. 

Fig. 3b illustrates a first TVC which may be generated fn»n the UTC. The 
TVC inchides some of the original digits, the misdng digits being replaced by "blank" 
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characters. The TVC also inchides a prefix code "P*, "M" or "L* to indicate whether 
the sum is to be found in the First, Middle or Last digits of the last four digits. In the 
present example, the sum is in the middle digits C of the last four, and this is denoted 
m the TVC by prefix "M". It will be appreciated that the prefix code is only inchided 

5 in the TVC, and not in the UTC. 

When the UTC is presented for verification, the local bank can check firstly 
whether the digits in the UTC agree with the digits abeady known in the TVC, and 
secondly, whether the appropriate checksum digits denoted by the TVC's prefix 
corre^nd to the sum of the first four digits. 

10 Rg. 3c illustrates a second TVC which may be generated for the same UTC. 

The prefix code is, of course, the same as that for Fig. 3b, but this example illustrates 
that a person cannot predict which di^ts are known in the TVC, since this can vary. 

The above scheme represents a balance between security and ease of verification 
at a remote bank. Other schemes may be used which require computer verification, but 

15 this could restrict the banks at which the transferee is able to collect the fimds. 

Referring to Fig. 4, the remote unit 10 comprises a main processor 30 to which 
are connected a display screen 32, a keyboard 34, a swipe card reader 38, a receipt 
printer 40, a customer/transaction logger 41, and a telephone communications modem 
44 coupled through an encryption/decryption unit 46 for communicating with the server 

20 12. The di^lay screen may, for example, be a video diq[)lay unit, or it may be an 
alphanumeric diq)lay, for example, an LCD di^lay. The display is used to present 
messages and pn)nq>ts to the customer (transferor) and/or the local agent supervising 
the remote terminal 10, in response to instructions horn the server 12. The detaOs of 
the transaction and, if the customer is a new customer, the customer's details, are 

25 entered using the keyboard 34. 

The logger 41 provides a sununary of information iiq>utted through the terminal 
10 during a working day, so that end-of-day information can be generated and checked 
by the server 12. 
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The logger 41 and the encryption/decryption unit 46 are ilhistrated above as 
discrete units for ease of description. However, it will be appreciated that these units 
may be embodied by software running on the main processor 30. 

Referring to Fig. 5, the server 12 consists generally of a central processor unit 

5 90 to which are connected a customer database 92» a transaction database 94, a 
reference database 96, a PIC generator 98, a UTC/TVC generator 100, a secure postal 
printer 102, an output system 104 (for passing transfer instructions to a bank 
computer), an input cache 106, and a telephone modem 108 coimected through an 
encrypdon/decryption unit 110 (which is similar to the encryption/decryption unit 46 

10 described above for the remote terminal 10). 

The customer database 92 is a master database of all customers (transferors) 
who have used the system at any time. For each customer, the database also inchides 
full name and address information, at least limited transacdon history, and the 
customer's PIC and CIC. The transaction database 94 is a master database of the 

15 transacdons. This includes all pending transactions, and possibly at least a limited 
history of completed transactions. The information in the transaction database 94 may 
be archived from time to time to make more memory available for new transactions. 
The reference database 96 is a master database of the current refermce information 
required for the transactions, including, for example, the countries to which transfers 

20 can be sent, available recipient bank details for each country, currency exchange rates 
and commission rates. 

The secure postal printer 102 is of a known type which is able to produce sealed 
envelopes contaimng a printed sheet, it being posable to read the sheet only by 
breaking open the sealed envelc^. Such printers are used in applications where it is 

25 desired to print information securely to send to a recipient, while ensuring that local 
staff are unable to read the contents of the envelope. 

Fig. 6 illustrates the operation of the server 12 once communication has been 
established between a terminal 10 and the server 12. Step 122 determines whether the 
information from the terminal 10 corre^xmds to a new or existing customer. This is 
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apparent if the information contains an existing customer identification code CIC. 
Assuming as a first case that the information does corre^ond to a new customer^ then 
the process proceeds to step 123 at which the server 12 controls the terminal to prompt 
for, and return, inputted customer information^ including the customer's fiill name and 

5 address. At step 124 a new customer entry is created hi the customer database 92. 

From step 124, the process proceeds to step 125 at which the server 12 controls 
the terminal to prompt for a new swipe card to be introduced into the terminal's card 
reader 38. As explained hereinbefore, the swipe card carries a pre-recorded CIC, which 
is read by the terminal 10 and returned to the server 12. At step 126, the read CIC is 

10 recorded in the customer database. This completes the introduction of a new customer 
at the terminal 10. The customer can then use the swipe card to initiate a transfer. 

At step 127, a PIC is generated for the new customer by the PIC generator 98. 
As explained previously, the PIC is used later by the recipient to identify hunself at his 
local bank to collect the transferred funds. A separate PIC is generated for each 

15 customer. In the present embodiment, the PIC is produced as a random or pseudo* 
random 4*digit number, so that it is impossible to derive any relationship between the 
PIC and the customer's details (which might otherwise enable PIC's to be predicted by 
fiaudulent parties). However, in other embodiments, the PIC could be the result of a 
diecksum or hashing function carried out on the customer's name or address, so that it 

20 is possible to verify whether given PIC matches given party's name. Alternatively, it 
is posable to generate a pseudo random PIC using an encryption algorithm which is 
virtually impossible to reverse or to predict, but which retains a verifiable relationdup 
witii the parties names. However, in the present embodiment, it is assumed that it may 
be difficult to arrange for verification of the PIC by the recipient's bank, and so it is 

25 preferred to utilise a completely random PIC. 

At step 128, the PIC is recorded in the customer database. The PIC is also 
printed in a sealed envelope by the secure printer 102, and the envelq>e is addressed 
and posted to the custinner at his home address identified in the customer mformation 
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received from the remote terminal 10 (and now stored in the customer database 92 of 
. the server 12). 

It will be appreciated that steps 127 and 128 can be carried out either 
immediately after communication with the terminal 10» or at some subsequent time 
5 when the server 12 may be less busy. 

If at step 122 the received information contains an existing CIC (and therefore 
corresponds to an existing customer, the process proceeds to step 130 at which the 
customer's PIC is retrieved from the customer database. At step 132, the transfer is 
analysed to assess whether it is a suspicious transfer which should be stewed for legal 
10 reasons. Su^icious transfers may, for example, be detected as any of the following: 

(i) transfers greater than a certain allowable amount (which may vary depending 
on the destination country); 

(ii) repeated transfers which accumulate to a sum greater than an allowable 
amount over a predetermined period (the amount may vary depending on the 

15 destination country); 

(iiO repeated transfers the frequency of which exceeds an allowable figure 
(which may very dqiehding on the desdnation country). 

The purpose of step 132 is to provide at least a degree of protection to prevent 
large scale money laimdering or illegal funds transfer from one country to another If a 

20 5uq[>icious transfer is detected, then the transfer process can be aborted, or the server 
12 can prompt the terminal 10 that proof of idendfication is required before the transfer 
can proceed. Details of the proof of identification (e.g. a passport number) can be 
entered at the terminal 10 for communication back to the server 12. 

At step 134, a check is performed on whether the customer's payment has yet 

25 cleared. If cash is used to pay for the transfer, then this step can be omitted. 
However, if payment has been made by cheque, then no transfer should be authorised 
until the cheque has been cleared by the customer's bank. If the payment has not yet 
cleared, then the data is re-stored (for example, in the input cache 106 or in a sqxuate 
pending store) to be re-processed during the next day's processing. 
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At stq> 135, the UTC and the TVC for the transfer are provided. These could 
eifter be generated "live", for example, by suitable algorithms, or the UTC and the 
TVC could be obtained ftom a supply of pre*generated codes. Such codes could be 
pie-generated when the server 12 is ml busy, for example, overm'ght, and stored m 
5 suitable memory. 

At step 136, the UTC is communicated from the server 12 to the terminal 10 to 
be printed by the terminal's printer 40. TTiis provides the customer (transferor) with 
the UTC to send to the transferee. 

At step 137, the transfer detaUs are issued as a transfer instruction to the 
10 intermediary bank. The transfer instructions include the transfer details originally 
iiq)utted by the customer, the PIC, and the TVC (inchidmg the prefix code ''F', "M* 
or "L"). 

At step 138, the transaction details are stored in the transaction database 94 as a 
pending transaction, which completes the initial transaction processmg. Although not 

15 illttstrated in the drawmgs, additional processing can be provided when the foreign 
bank returns the full UTC as evidence that the transaction has been completed. The 
retnri^ UTC can be compared to the UTC recorded in the transaction database to 
verify that the transaction has been completed correctiy. Alteinatively, this verification 
step might only be necessary if a transferor complains of non-delivery of funds to the 

20 transferee, or of collecticm by an unauthorised person. 

In Hg. 5, the encryption/decryption unit 110. tte u^t cache 106, the PIC 
graerator 98, the UTC generator 100, the TVC graerator 101, and die databases 92, 94 
and 96 are illustrated as sq>arate "items'^ from tte server processor 90. This is merely 
to aid description of the invention. It will be ai^reciated that these functional parts may 

25 be implemented by software applications running on the processor. 

Although not illustrated in the drawings, it may also be possible for a customer 
to place a telqphone order to a telephone receptionist, who would then enter the transfer 
details usfaig a dedicated terminal, or directly on to die server 12. The UTC could be 
issued to the telephone transferor either by teIq>hone, or by means of the secure postal 



SUBSTmiTE SHEET (RULE 26) 



W0 99/28«72 



PCT/GB98«I3537 



17 

printer 102. In the latter case, it is prefened that the UTC be printed and posted 
separately from any conimunicadon of a new PIC» to reduce die chances of these items 
of infonnadon being intercepted together. 

The above embodiment employs '^cmline" qpeiadon of the terminals 10 under 

5 the drect control of the server 12. All of the information processing is carried out by 
the server 12. This can enable relatively inexpensive and straightforward terminals to 
be used» and it can also enable updated information to be available immediately amply 
by changing the information and/or the programs on the server. 

In an alternative raibodiment^ it may be desirable to provide at least some of the 

10 tenninals with a degree of autonomy, for offline operation. Referring to Fig. 4, die 
tenninal 10 is similar to that previously described, but includes the following units 
(shown in phantom): a UTC/TVC generator 48; a reference database 36; and a 
customer/transaction database 42. The reference database 36 provides reference 
infonnadon for the remote tenninal^ such as details of the mdividual countries to which 

15 transfers can be sent, and the individual banks in each country* the exdiange and 
commission rates for each country, and the likely transfer delay for each countiy (if a 
calculation of the e3q)ected.amval date of the funds is to be provided). The reference 
database may also include details of public holidays in each country, and the allowable 
methods of payment by the customer (for example, cadi, cheque, credit card, e-cash, 

20 momlex, etc.) and the clearance delay for each type of payment (if the calculation of 
the expected arrival date of the funds is to be provided). The information in the 
reference database can be updated periodically by the sender 12, for example, at the 
start of a day, or during routine polling of the tenninal 10 by the server, as described 
fiuther below. 

25 The customer/transaction database 46 is used to store ctetails of transfer 

requests, and details of any new custcmiers, until the infonnation can be uploaded to the 
server 12 for acticm. 

Referring to Fig. 7, before a new customer can use the transfer system, the 
customer's details have to be entered hito the terminal uang tte keyboard (step SO). 
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The customer details include tbe customer's name and address (or other contact 
details), so that the secure PIC can be sent later to the customer by the server 12. The 
customer details are then stored in the customer/transaction database 42 (step 52). 
Thereafter, the customer is issued with a swipe card (step 54) which carries a unique 

5 customer identification code (CIC), as explamed previously. 

At step 56, tihe customer (or the local agent) enters details of the desired 
tnmsfer. Such details include the name and address of the recipient (transferee), the 
amount to be transferred (in the local currency of the customer), the method of 
payment by the customer, and the destination country, name and address of the bank or 

10 other money handling agent at which the recipient will collect the transferred funds. 

At step 58, the processor 30 calculates and displays the value of the funds m the 
recipient's currency, and the amount of commission charged, based on the information 
stored in the reference database 36. If desired, the processor may also calculate an 
estimated date of arrival of the transferred funds at dm destination bank, using 

15 mformation in Ac reference database, and the following formula: 

Arrival date = today's date + funds clearance delay + transfer delay + calendar 
(holiday) delay 

20 If die customer agrees to the transaction and makes payment to the agent, then 

this is confirmed at step 60. (If the customer declines to proceed, then the process can 
be aborted at this st^.) Thereafter, at stq> 61 the UTC ami TVC for the transfer are 
provided/generated by die UTC/TVC ^nerator 48. The UTC and TVC can eitiier 
being generated "live-, or a pre-generated UTC and TVC can be retrieved. Such 

25 UTC*s and TVC*s may either be generated by local generators within the terminal, or 
they may be downloaded htm the server 12 as part of the update nifonnation for the 
reference database. 

At step 62, the transfer details including the allocated UTC are stored in the 
\:ustomer/transaction database 42 to await uploading to tte server 12 for processing. 
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The transfer details including the UTC arc also printed out (step 64) by the tenniiial*s 
receipt printer 40 to provide a receipt for the customer. 

The above method steps apply to a new customer. An existmg customer singly 
mserts his or her swipe card into the terminal's card reader 38 (step 66)» at which stage 

5 the customer number is read from the card. Hiis provides sufScimt mfbrmation for 
the senrer 12 to access the customer's details which are stored in the server 12. After 
step 66, the process proceeds directly to step 56 for the customer (or agent) to enter the 
details of the transfer, as described above. 

At various intervals during the day, the terminal 10 is polled by the server 12 by 

10 telephone^ to upload money-transfer information and new customer information to the 
server 12, and to receive new reference information from the server 12. Referring to 
Fig. 8, when a telephone call is received from the server 12 (step 70) the process 
proceeds to step 172 at which the terminal 10 verifies that the call is from the prc^r 
server 12, for example, by means of a secret password. The terminal also returns a 

15 secret password, so that the server 12 can verify that it Is communicating with the 
proper tennmal 10. It will be appreciated that all information sent and received 
through the telephone line is communicated m encrypted form, so that the mformadon 
cannot easily be inten:q>ted. At the terminal end, the information is 
encrypted/decrypted by the encryption/decryption unit 46 connected between the 

20 processor 30 and the modem 44. 

FbUowing step 72^ the terminal waits to receive any new reference informadon 
(step 74) for the reference database 36. Such new information may be in the form of a 
replacement "reference* file to overwrite the entire existing contents of the reference 
database 36, or it may be in the form of iqxlate '"packets" to r^lace only certain 

25 informadon in the reference database. The new information (if any) is then written into 
the database. 

At step 78, the terminal transmits the new contents of the customer/transacticm 
database 42 to the server 12. This new mformation includes details of any new 
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customers (including the customer identification number for each new customer), and 
details of transfer requests entered by the customers. 

Step 80 determines whether the terminal has closed at the end of the day and, if 
so, the process proceeds to step 82 at which end-of-day (EOD) mformati0n is 
5 transmitted to the server 12. The EOD information includes totals representing the 
day's transactions and new customers, to provide a cross-check that all of the terminal's 
information has been validly received by the server 12. This is subsequently cross- 
checked by the server 12. If the termmal has not yet closed at the end of the day, thra 
die process branches past step 82, to step 84 at which the communication is termmated. 

10 The server 12 will normaUy poll each termmal 10 at several different tunes 

during the day. During each communication session, the terminal transmits only the 
new information contained in the customer/transaction database 42 (i.e. the information 
not previously communicated to the server), fa this embodiment, the mformation 
remains in the customer/transaction database 42 until after the server 12 verifies, for 

15 example, by means of the EOD information, that all of the mformation has been 
uploaded correctly to the server 12. Such a technique enables all of the information to 
be uploaded to die server again if necessary, for example, should any discrepancies 
arise from the EOD mformation. However, m other embodunents, the 
customer/transaction database 42 could be cleared after each communication session 

20 with the server 12, if dedred. 

In Fig. 4, the reference database 36, the customer/transaction database 42, the 
encryption/decryption unit 46 and the UTC/TVC generator 48 have been iUustrated as 
distinct '•items'' from the processor unit 30. This presentatiwi is merely schematic to 
aid description of the invention. It will be aR)reciated tiiat such items may be 

25 implemented as application software ran by the processor unit The reference 
information and the customer/transaction information may be stored as files on 
conventional mass storage, for example, a semiconductor mass memory or a magnetic 
disc. 
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In use, the server 12 polls each remote terminal 10 to download updated 
reference infonnation to the terminal 10, and to upload new transfer*request 
infonnation and new-customer mformation from the terminal. The communicaticni 
procedure is complementary to that descn^bed above with reference to Fig. 8, and so is 
5 not expanded further here. The uploaded information is stored temporarily m the mpnt 
cacht 106 until it can be processed by the processmg unit 90. 

Fig. 10 ilhistrates the manner in which each "packet" of information fiom the 
iqnit cache 106 is processed. Where ^ropriate the same reference numerals as those 
in Fig. 6 are used to denote an equivalent operation step. The information is firstly 

10 read from the cache 106 at step 120 and, as before, step 122 determines whetfier the 
information corresponds to a new customer. Assuming as a first case that the 
information does corre^nd to a new customer, then the process proceeds to step 124 
at which a new customer entry is created in the customer database 92, containing the 
CIC read from the input cache. 

15 From step 124, the process proceeds to step 127 at which a PIC is generated for 

the customer. 

At step 128, the PIC is printed in a sealed envelope by the secure printer 102, 
and the envelope is addressed and posted to the customer at his home address identified 
m the customer informadon received from the remote terminal 10 (and now stored in 
20 the customer database 92 of the server 12). The PIC is also stored m the customer 
database 92. 

Step 132 represents the first step for processing the transfer after the customer 
and recipient details have been stored. At step 132, the transfer is analysed to assess 
whether it is a suspicious transfer which should be stopped for legal reasons, as 
25 explained in more detail hereinbefore. 

At step 134, a check is performed on whether the customer's payment has ytt 
cleared. Assuming that the payment has cleared, the process proceeds to stq) 136 at 
which the transfer details are issued as a transfer instruction to the intermediary bank. 
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The transfer instructions include the transfer details originally inputted by the customer, 
the PIC, and the TVC received firom he terminal 10. 

At step 138» the transaction details are stored in the transaction database 94 as a 
pending transaction, which completes the initial transacdon processing. 
5 If at step 122, the infonnation correi^nds to an existing customer, the process 

proceeds to through istep 142 at which the exisdng PIC for the customer is read from 
the customer database for re-use. The process then proceeds through step 132 for 
pnx:essing of the transfer details, as described above. 

In the above embodunent, the UTC and TVC are allocated to the transaction at 
10 the point of sale tenninal 10, to provide offline operation of the terminal 10. Although 
in the illustrated embodiment, the TVC is allocated at the terminal, this could instead 
be allocated by the server 12, to reduce the risk that the TVC might be available by 
tapping into the terminal somehow. 

In the above embodiments, the PIC is associated only with the transferor. In an 
15 alternative form, the PIC could be associated instead with each transferor/transferee 
pair. Urns instead of a transferor having a single PIC, the transferor would have 
different PIC*s for his different transferees. This could provide additional security if 
needed, but might require the transferor to remember possibly a large number of PIC's. 
The cusU>mer database would also need to store aU of the PIC's for each transferor, 
20 and be able to identify subsequent transactions between the same transferor and 
transferee, in order to use the correct PIC. 

In die above embodunents, swipe card is pre-programmed with its CIC, and this 
is the only informaticHi required to be read by the terminal. In other embodiments, the 
terminal might be equipped with a card reader/writer for writing information to the 
25 card as well as reading it from the card. This could enable "favourite recipient** data to 
be stored on the swipe card in order to simplify the operation for the transferor. 

It wiU be appreciated that the invention, particulariy as illustrated in the 
preferred embodiments, can enable funds to be transferred in a logical and secure, 
marmer, which allows a redpient to receive the funds without having to have official 
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proof of identity (such as a passport). Only the transferor and the intended transferee 
have access to sufficient information to complete the transfer, and it is the transferor's 
responsibility to ensure that the information is sent in a secure manner to the transferee. 
Nei Aer the local handling agent for the transferor, nor the local handling agent for the 
transferee, have direct access to sufficient mformation to complete a valid transfer. 

While features believed to be of unportance have been icfentified in the 
foregoing description, and in the appended claims, the aj^licant claims protection for 
any novel idea, feature or combination of features described herein and/or illustrated in 
the drawings irreq>ective of whether emphasis has been placed thereon. 
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CLAIMS 

1. A method of handling money transfer requests in a system which inchides at 
least one input device for receiving information directly or indirectly from a transferor, 

5 and processing means for communicating with the input device for processing money 
transfer requests thereirom, the method conqprising: 

receiving at the processing means a money transfer request from the input 

device; 

providing within the processing means a first identifier code for thie transfer 
10 and/or for at least one of the parties to the transfer; 

sending the first identifier code directiy or indirectly to the transferor if the first 
identifier code is a new code, the sending operation to the transferor being an 
independent operation from the commtinication with the input device; 

outputting money transfer instructions inchiding at least a portion of the first 
15 icfentifier code or information related thereto; and 

communicating the money transfer instructions to a money handling authority as 
instructions to effect the money transfer, whereby the authority of the transferee party 
to receive the funds can be verified upon presentation of the first identifier code by the 
transferee psaty. 

20 

2. A method of operation in processing means for processing money transfer 
requests, the method comprising: 

receiving at the processing means information representing a money transfer 
request; 

25 providing within the processing means a first identifier code associated with the 

transfer and/or with at least one or the parties to the transfer; 

sending die first identifier code directly or indirectiy to the transferor if the first 
identifier code is a new code; 
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outputtmg money transfer instructions including at least a portion of the first 
identifier code or information related thereto; and 

communicating the money transfer instructions to a money handling authority as 
instructions to effect the money transfer, whereby the authority of the transferee party 
5 to receive the fimds can be verified upon presentatim of the fiirst identifier code by the 
transferee party. 

3. A method of communicating information with a transferor for a money transfer 
oi^ration to transfer money to a transferee, the inethod comprising: 
10 (a) receiving transfer mstruction mformation directly or indirectly from the 

transferor; 

(b) providing a first identifier code associated with the transfer and/or with 
at least one of the parties to the transfer, the code being required by the transferee to 
complete the money transfer q>eratic»i; 
15 (c) ou^uttmg or selectively outputting the first identifier code for 

communication to the transferor; 

wherein in step (c) the first identifier code is ou^tted for confidential 
communication to the transferor independentiy of the communication in step (a). 

20 4. A method according to ciaun 3, wherein stq> (c) con^rises selectively 
ou^utting the first identifier code if the code is newly allocated, 

5- A method according to claim 1, 2, 3 or 4, wherein the step of providing tte 
first identifier code comprises selectively allocating a new identifier code, or re-using a 
25 previously allocated identifier code. 

6. A method according to claim 5, wherein the party identifier code is associated 
with the transferor. 
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7. A method according to claim 6, wherein the processing means comprises a 
database of transferors* the database containing for each transferor the or a party 
identificadon code associated therewith. 

5 8. A method according to any preceding claun, wherein the step of allocating a 
new first identifier code comprises generating a random or pseudo random code. 

9. A method according to any preceding claim» further comprismg generating a 
seccmd identifier code associated with the transaction, and ontixitdng the second 
10 identifier code to the transferor, and wherein the step of generating the money transfer 
instructions at the processing means comprises including a verification code related to 
the second identifier code to enable the correct second identification code to be verified 
when presented by the transferee. 

15 10. A method according to claim 9, wherein the second identifier code is oa^tted 
to the transferor at the or a remote terminal. 

11; A method of handling money transfer requests in a system which includes 
processing means for processing money transfer requests, the method comprising: 
20 generating an identifier code associated with a transfer request; 

ou^mtting the identifier code for commnnicaticm to the transferor; 

Quitting from the processing means money transfer instructions mcluding a 
verification code related verifiably to the identifier code; 

conununicating the money transfer instructions to a money handling authority as 
25 instructions to effect the money transfer, whereby the authority of the transferee party 
to receive the funds can be verified at least partiy upon presentation of the original 
identifier code matching the incomplete code in the money transfer instructions. 
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12. A method according to claim 11, wherein the identifier code is based on a 
random or pseudo random code. 

13. A method according to claim 11 or 12, wherem the money transfer requesi is 
5 generated at a terminal remote from the piocessing means, and die icfentifier code is 

outputted at the terminal for the transferor. 

14. A method of operation in a processing means for processmg money transfer 
reqaests, the method comprising: 

10 receiving at the processing means information representing a money transfer 

request; 

providing an identifier code; 

providing a verification code related verifiably to the identifier code, the 
verification code being insufficient to enable the identifier code to be deduced 
15 unambiguously therefrom; and 

ou^tting from the processing means money transfer instructions inchidmg the 
transaction verification code, for communicadon to a money handling authority as 
instructions to effect the money transfer, whereby the authority of the transferee party 
to receive funds can be verified at least pardy upon presentation of the origmal 
20 identifier code matching the verification code in the money transfer instructions. 

IS* A method according to claim 11, 12, 13, 14 or 15, wherein the identifier code 
is generated such that at least one character thereof represents a function of one or more 
other characters of the identifier code, and the step of providing the verificaticm code 
25 comprises generating a code comprising at least one, but not all, of the characters of 
the identifier code and including information indicative of the position in said identifier 
code of said at least one character and/or of said one or more other diaracters. 
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16. A method according to claim 15, wherein the characters in the identifier code 
arenmneric. 

17. A method according to claim IS or 16, wherein the function is a sum function. 

5 

18. A method according to claim IS, 16 or 17, wherein the verification codt 
comprises one or more blank characters representing missing character or digit 
poiations of the identifier code. 

10 19. A method according to claim 15, 16 or 17, wherein the function is based on 
characters in one or more predetermined positions in the identifier code, and said 
informadon represents the position in said identification code of the result of the 
function. 

15 20. A metlxid according to any preceding claim^ further comprising storing the or 
each identifier code at the proces^g means. 

21. A money transfer system comprising: 

at least one iqnit unit operable to generate a money transfer request in 
20 accordance with information from a transferor; and 

proces^g means for communicating with the or each iiq>ut unit for receiving 
and processing money transfer requests therefrom, the procesang means comprising: 

means for providing a fist identifier code for the transaction and/or for the one 
or more parties to the transfer; 
25 means curable to output first information including the first identifier code, to 

be communicated directiy or mdirectiy to the transferor independenUy of the 
communication operation with the input unit; and 

means for ou^tting money transfer instructions inchiding at least a portion of 
Ae first identifier cocfe or information related thereto, for communication to a mcmey 
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handling authority as instructions to effect the money transfer, whereby the authority of 
a transferee party to receive the funds can be verified at least partly by presentation of 
the first identifier code by the transferee party. 

5 22. A system according to claim 21 » compri^ng at least one remote iq>ut unit. 

23. A processing system for use in a money transfer system for processing money 
transfer requests, the procesang system comprising: 

means for receiving information iq)resenting a money transfer request; 
10 means for providing a fist identifier code associated with the transaction and/or 

with one or more parties to the transfer; 

means operable to output first infonnation including the first identifier code» to 
be communicated directly or indirectly to the transferor; 

means for outputting money transfer instructions including at least a portion of 
15 the first identifier code or infonnadon related thereto, for communication to a money 
handling antfaority as instiucdons to effect the money tranter, wherd)y the authority of 
a transferee party to receive die funds can be verified at least partly by presentation of 
the first identifier code by the transferee party. 

20 24. A system for conmiunicating infonnation with a transferor for a money transfer 
operation to transfer money to a transferee, the system comprising: 

means for receiving transfer instruction information direcdy or indirectly from 
the transferor; 

means for providing a first identifier code associated with the transfer and/or 
25 with at least one of the parties to the transfer* the code being required by the transferee 
to complete die money transfer operation; and 

means for outputting the first idratifier cocfe- for confidential communication to 
the transferor. 
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25. A Systran according to claim 24, wherein the means for oij^)utting information 
for the transferor comprises means for selectively ontputting the first identifier code if 
the code is newly allocated. 

26. A system according to claim 21, 22, 23, 24 or 25, wherein the means for 
providmg the first identifier code comprises means for selectively allocating a new 
identifier code, or re-osing a previously allocated identifier code. 

27. A system according to claim 26, whcrem the first identifier code comprises a 
party identification code associated with die transferor. 

28. A system according to claim 27, wherein the processing means, comprises a 
database of transferors, the database containing for each transferor the or a party 
identification code allocated thereto. 

29. A system according to any of claims 21 to 28, wherein the means for aUocating 
a new first identifier code comprises means for generating a code based on a random or 
pseudo random code. 

30. A system according to any of clauns 21 to 31, limber comprismg means for 
generating a second idendfier code associated with Ae transaction, and ouqmtdng the 
second identifier code to the transferor, and wherein the means for generatmg die 
money transfer instructicms at the processing means comprises means for inchidmg a 
verification cocfe related to the second identifier c6de to enable ib& correct identifier 
code to be verified when presented by a transferee. 

31. A system accordmg to claim 32, wherein die second identifier code is ou^tted 
to the transferor at the or a remote terminal. 
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32. A system for handling money transfer requests^ comprising: 

at least one input device for receiving transfer request information direcdy or 
indirecdy from a transferor^ 

means for allocating an idendfier code associated with the tranrfer request; 
5 means for outputting the identifier code for the transferor^ the code being 

required by a transferee to complete a valid money transfer; and 

means for providmg a verification code related to the identifier code, the 
verification code being insufficient to enable the identifier code to be deduced 
therefix)m unambiguously, 
10 means for outputting money transfer instructions including the verification code 

for communication to a money handling authority, as instructions to effect the money 
transfer, whereby the authority of a transferee party to receive the funds can be verified 
at least partiy upon presentation of the original identifier code matching the verification 
code in the money transfer instructions. 

15 

33. A system according to claim 32, wherein the identifier code is generated as, or 
is based on, a random or pseudo random code. 

34. A system according to claun 32 or 33, wherem die mput device is a remote 
20 terminal. 

35. A processing system for processing money transfer requests, the system 
comprising: 

means for receiving information representing a money oansfer request; 
25 means for aUocating a transaction identifier code for cormnunication directiy or 

indirecdy to a transferor; 

means for providing a verification code related to the transaction identifier code» 
the verification code being insufiicient to enable the identifier code to be deduced 
unambiguously therefrom; 
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means for ou^tdng money transfer instructions including the verification code, 
for conununication to a money handling authority as instructions to effect the money 
transfer, whereby the authority of the tran^eree party to receive funds can be veiified 
at least partly upon presentation of the original identifier code matching the inconq>lete 
5 code in the money transfer instructions. 

36. A terminal for receiving money transfer requests, and for communicating 
transfer request information to a central processor, the terminal comprising: 

input means for receiving infoimation regarding the transfer and the parties to 
10 the transfer; 

means operable to allocate and/or to receive a transaction identifier code; 
means for outputting the transaction identifier code for communication to the 
transferor; 

means for storing information relating to the requested money transfer, said 
15 information including the allocated identifier code; and 

means for communicating with a said central processor. 

37. A terminal according to claim 36, wherein the input device comprises a card 
reader for reading infonnation on a card presented thereto. 

20 

38. A terminal according to claim 37, wherein tiie card reacfer comprises a magnetic 
card reaifer. 

39. A method of handling a money transfer request, comprising: 

25 receiving transfer request information directiy or indirectiy from a transferor; 

allocating a transaction identification code for the transfer request; 
providing a party identifier code associated with one or more parties to the 
transaction; 
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communicating at least the transacdon identifier code to the transferor^ to be 
forwarded by the transferor to the transferee; 

communicating money transfer instructions to a money handling authority to 
effect tbt transfer, the money transfer instructions including information relating to the 
5 transaction identifier code and infonnadon relating to the party icfentifier code» but at 
least one of the codes being incomplete such that the money transfer instructions do not 
contain sufficient information to complete a valid transfer; 

whereby the authority of a transferee to receive the funds can be verified by the 
money handling authority upon presentation by the transferee of the original transacticm 
io identifier code and the origmal party identificadon code, which match the mformation 
in the money transfer instrucdons. 

40. A method according to claim 39, wherein the step of communicating 
infoimadon to the transferor comprises selectively communicating the party identifier 
15 code. 

4L A method according to claim 40» wherein the step of communicating 
information to the transferor comprises conununicating the party identifier codt if the 
party identifier code is newly allocated. 

20 

42. A method according to claim 40 or 41» wherein the step of communicating 
information to the transferor comprises not communicating the par^ idoitifier code if a 
party identification code has prcAnously been allocated for an earlier transacticin 
between the same parties* and is to be re-used for the current transaction. 

25 

43. A method according to any of claims 47 to 49, wherein the party identification 
code* if communicated to the transferor, is communicated independentiy of the 
transaction identifier code. 
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44. A method of testing infonnation provided by a transferee for coUection of 
lunds, the method comprismg: 

rccehring transfer mstnictions mcluding a first partir identifier code allocated to 
at least one of the parties to the transfer, and a second transaction verification code 
5 related to a transaction icfentifier code allocated to the transaction; 

(a) comparing the first party identifier code fiom tfie transfer instructions with a 
party identifier code provided by the transferee; and 

(b) comparing the second transaction verification code with a transaction 
identification code provided by the transferee. 

10 

45. A method according to claim 44, fiirlher comprising returning the transaction 
identification code to the issuing autiiority as evidence that the transferee is authorised 
to receive tlie fimds. 

15 46. A method according to clahn 44 or 45, wherein the transaction verification code 
contains some, but not all of the characters of the transaction identification code, and 
tte metiiod comprises conqmring each known character in the transaction verification 
code for e^ivalency with a corresponding character of the transaction idratifier code. 

20 47. A method according to claim 44, 45 or 46, wherein the transaction verification 
code includes information associated with the resfult of a function based on one or more 
diaracters of the transaction identification code, and the method comprises testing 
whether the transaction identification code presented by the transferee matches the 
function. 

25 

48. A method or apparams for handling money transfer requests, being substantially 
as hereinbefore described with refereiK:e to any of the accc»npan^ng drawings. 
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